Allow tlsv1 for clients but use tlsv1_3 for ISP trunk

Hi

I have an registrar / isp which when using TLS, requires version 1.3 - DNS NAPTR is used for service discovery.

I have some older sip devices, which most probably only support TLS 1.0

In [transport-tls] which I set method=tlsv1_3 the trunk registers and talls to from the isp work, but some older clients can not register anymore.

I would rather not link the transport to a clients to allow it to choose which transport to use and also be able to use IPv6

I have been trying to tune /etc/ssl/openssl.conf but I have not found a variant which allows asterisk to autonegotiate the tls protocol version per peer.

Is this possible?

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.